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IN THE CLAIMS : 

Please cancel claims 1-15. 

Please enter new claims 16-33 as follows: 
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16. (New) System for authorizing access to a resource requested by a user, said system 
comprising: 

a first table entry listing a userlD and a first name of said user as an individual which 
validly corresponds to said userlD; 

a second table entry listing said userED and a second, different name of said user as an 
individual which validly corresponds to said userlD; 

a third table entry indicating that said first user name is part of a first group of individuals; 

a fourth table entry indicating that said second user name is part of a second, different 
group of individuals; 

fifth table entries listing: 

said first name and a first resource accessible to said first name, 

said second name and a second resource accessible to said second name, 

said first group and a third resource accessible to said first group, and 

said second group and a fourth resource accessible to said second group; and 

authorization means, responsive to receipt of a request based on said userED to access a 
resource and authentication of said userlD, for determining based on said first table entry that said 
userED corresponds to said first user name, determining based on said second table entry that said 
userED also corresponds to said second user name, determining based on said third table entry that 
said first user name is part of said first group, determining based on said fourth table entry that 
said second user name is part of said second group, and determining based on said fifth table 
entries whether any of said first name, said second name, said first group or said second group is 
authorized to access the requested resource, and if so, granting said userlD access to said 
requested resource. 
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17. (New) A system as set forth in claim 16 wherein said user submits a password along with 
said userlD, and further comprising authentication means for validating a combination of said 
password and said userlD to authenticate said userlD. 

18. (New) A system as set forth in claim 16 wherein said first group but not said first name, 
said second name or said second group is directly listed as authorized to access said requested 
resource. 

19. (New) A system as set forth in claim 16 wherein said second name, but not said first 
name, said first group or said second group is directly listed as authorized to access said requested 
resource. 

20. (New) A system as set forth in claim 16 wherein: 

said first name comprises a first, last or nickname of said user and a first geographic 
location associated with said user; and 

said second name comprises said first, last or nickname of said user and a second, different 
geographic location associated with said user. 

21 . (New) A system as set forth in claim 16 wherein said third table entry identifies said first 
group of individuals by a first group name and a first group ID, and said fourth table entry 
identifies said second group of individuals by a second group name and a second group ID. 
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22. (New) Method for authorizing access to a resource requested by a user, said method 
comprising the steps of: 

generating a first table entry listing a userlD and a first name of said user as an individual 
which validly corresponds to said userlD; 

generating a second table entry listing said userlD and a second, different name of said 
user as an individual which validly corresponds to said userlD; 

generating a third table entry indicating that said first user name is part of a first group of 
individuals; 

generating a fourth table entry indicating that said second user name is part of a second, 
different group of individuals; 

generating fifth table entries listing: 

said first name and a first resource accessible to said first name, 

said second name and a second resource accessible to said second name, 

said first group and a third resource accessible to said first group, and 

said second group and a fourth resource accessible to said second group; and 

in response to receipt of a request based on said userlD to access a resource and 
authentication of said userlD, automatically determining based on said first table entry that said 
userED corresponds to said first user name, automatically determining based on said second table 
entry that said userlD also corresponds to said second user name, automatically determining 
based on said third table entry that said first user name is part of said first group, automatically 
determining based on said fourth table entry that said second user name is part of said second 
group, and automatically determining based on said fifth table entries whether any of said first 
name, said second name, said first group or said second group is authorized to access the 
requested resource, and if so, granting said userlD access to said requested resource. 
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23. (New) A method as set forth in claim 22 wherein said user submits a password along with 
said userlD, and further comprising the step of validating a combination of said password and said 
userED to authenticate said userlD. 

24. (New) A method as set forth in claim 22 wherein said first group but not said first name, 
said second name or said second group is directly listed as authorized to access said requested 
resource. 

25. (New) A method as set forth in claim 22 wherein said second name, but not said first 
name, said first group or said second group is directly listed as authorized to access said requested 
resource. 

26. (New) A method as set forth in claim 2 wherein: 

said first name comprises a first, last or nickname of said user and a first geographic 
location associated with said user; and 

said second name comprises said first, last or nickname of said user and a second, different 
geographic location associated with said user. 

27. (New) A method as set forth in claim 22 wherein said third table entry identifies said first 
group of individuals by a first group name and a first group ID, and said fourth table entry 
identifies said second group of individuals by a second group name and a second group ID 
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28. (New) A computer program product for authorizing access to a resource requested by a 
user, said computer program product comprising: 

a computer readable medium; 

first program instructions to generate a first table entry listing a userlD and a first name of 
said user as an individual which validly corresponds to said userED; 

second program instructions to generate a second table entry listing said userlD and a 
second, different name of said user as an individual which validly corresponds to said userED; 

third program instructions to generate a third table entry indicating that said first user 
name is part of a first group of individuals; 

fourth program instructions to generate a fourth table entry indicating that said second 
user name is part of a second, different group of individuals; 

fifth program instructions to generate fifth table entries listing: 

said first name and a first resource accessible to said first name, 

said second name and a second resource accessible to said second name, 

said first group and a third resource accessible to said first group, and 

said second group and a fourth resource accessible to said second group; and 
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sixth program instructions, responsive to receipt of a request based on said userlD to 
access a resource and authentication of said userlD, to determine based on said first table entry 
that said userlD corresponds to said first user name, determine based on said second table entry 
that said userlD also corresponds to said second user name, determine based on said third table 
entry that said first user name is part of said first group, determine based on said fourth table entry 
that said second user name is part of said second group, and determine based on said fifth table 
entries whether any of said first name, said second name, said first group or said second group is 
authorized to access the requested resource, and if so, grant said userlD access to said requested 
resource; and wherein 

said first, second, third, fourth, fifth and sixth program instructions are recorded on said 
computer readable medium. 

29. (New) A computer program product as set forth in claim 28 wherein said user submits a 
password along with said userlD, and further comprising seventh program instructions to validate 
a combination of said password and said userlD to authenticate said userED; and wherein said 
seventh program instructions are recorded on said computer readable medium. 

30. (New) A computer program product as set forth in claim 28 wherein said first group but 
not said first name, said second name or said second group is directly listed as authorized to 
access said requested resource. 

31. (New) A computer program product as set forth in claim 28 wherein said second name, 
but not said first name, said first group or said second group is directly listed as authorized to 
access said requested resource. 
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32. (New) A computer program product as set forth in claim 28 wherein: 

said first name comprises a first, last or nickname of said user and a first geographic 
location associated with said user, and 

said second name comprises said first, last or nickname of said user and a second, different 
geographic location associated with said user. 

33. (New) A computer program product as set forth in claim 28 wherein said third table entry 
identifies said first group of individuals by a first group name and a first group ID, and said fourth 
table entry identifies said second group of individuals by a second group name and a second group 
ID. 
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